$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20fb7a6d-5d86-3509-8b0d-e1ef0a9b923d.roa File: 20fb7a6d-5d86-3509-8b0d-e1ef0a9b923d.roa (raw, json) Hash identifier: fB6DrDcGQsXbVeiDEsEP7jQon11HtxkVIVvXeIL2slA= Subject key identifier: F4:6A:7B:F3:66:95:67:D4:82:5E:73:5A:2D:C4:35:78:BB:67:A9:96 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EED51F4FF180B1207A29641B0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20fb7a6d-5d86-3509-8b0d-e1ef0a9b923d.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.31.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:f4:ff:18:0b:12:07:a2:96:41:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=25f9590b-1020-4fec-ab50-a4c061b877b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:98:38:bd:e0:90:08:72:6d:6e:d4:23:78:bd: d5:db:ad:a6:90:76:cd:a7:fd:42:54:fd:92:03:65: e8:bd:db:b5:a3:47:b5:d9:87:2e:cc:e4:76:0b:83: 8a:79:65:11:fc:9d:5b:fa:05:22:74:f9:cc:5c:c7: 1a:ab:de:2f:40:35:ea:e2:39:bf:21:cd:7e:cf:97: c3:3b:04:34:ce:5d:3d:70:bb:53:57:2c:24:1f:90: f9:31:cb:01:67:76:60:5d:73:10:2e:a9:d8:ba:d0: 7a:36:ea:36:f6:7b:8a:59:90:76:57:e2:ab:dc:19: ce:31:a0:cf:b6:4b:26:68:6f:db:ad:e6:22:52:cc: d4:87:b5:b0:fc:29:d2:81:49:31:1f:f5:16:f8:b4: 06:55:3a:aa:30:4b:77:9d:4a:50:8a:81:42:7f:ba: 0b:75:22:4e:8e:72:0f:cc:9a:86:e9:46:dc:81:a0: af:8f:95:c1:13:0d:da:de:bd:4e:88:cc:2c:9b:6c: 36:17:b1:1c:7d:58:7c:69:f3:ef:ba:35:a6:b1:0a: 29:49:d8:e8:f5:a7:99:51:b5:56:38:58:0e:54:42: 00:9c:28:48:25:6e:9b:9c:07:1d:c8:b3:0d:dd:ef: 43:42:0c:41:90:d5:4e:cf:79:e6:47:cc:57:1f:fa: 4f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6A:7B:F3:66:95:67:D4:82:5E:73:5A:2D:C4:35:78:BB:67:A9:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20fb7a6d-5d86-3509-8b0d-e1ef0a9b923d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b2:59:c5:a5:c3:1f:d6:a1:c6:10:f1:6a:98:ca:c5:0d:5f: cb:7c:b3:5c:23:00:b4:23:2c:5f:63:86:d6:21:c5:e4:2c:02: b1:f6:98:73:50:5f:58:29:b2:34:0f:f0:26:c2:cf:54:b5:f8: b5:71:c8:3c:81:6f:68:49:fe:79:c2:22:ad:d5:4b:b2:a2:3f: b9:7b:d9:cc:71:c4:97:ee:31:bf:d8:3d:9c:49:6b:86:51:a3: 85:2a:b5:fb:6d:24:e2:7f:b4:b9:83:02:bc:fb:22:de:3a:0d: 1a:a3:86:23:4e:95:84:74:55:e4:7e:51:6e:3b:81:d5:ee:bf: 81:ac:c9:e9:85:82:d0:7b:17:11:e3:29:98:ce:8d:57:d5:52: fe:f0:57:f2:9b:15:94:73:d1:07:13:bf:8c:13:ef:e0:a7:5a: 72:22:9c:91:f9:cc:8b:9c:23:43:c2:70:1e:6d:13:0d:e6:bb: dc:53:4d:c2:a7:36:5c:33:16:4c:4f:d8:be:ea:5b:40:5b:c4: 25:c5:a3:09:c0:89:19:aa:3f:38:52:1d:dd:9f:a8:42:fc:a1: 49:00:2b:3d:63:40:93:62:99:f1:10:c5:78:94:e2:a1:cd:96: e4:71:ce:e0:b4:06:3c:7a:c6:c0:61:cb:af:6c:a8:3f:c9:d3: 46:fb:04:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUfT/GAsSB6KWQbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MjVmOTU5MGItMTAyMC00ZmVjLWFiNTAtYTRjMDYxYjg3N2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Zg4veCQCHJtbtQjeL3V262mkHbNp/1CVP2S A2Xovdu1o0e12YcuzOR2C4OKeWUR/J1b+gUidPnMXMcaq94vQDXq4jm/Ic1+z5fD OwQ0zl09cLtTVywkH5D5McsBZ3ZgXXMQLqnYutB6Nuo29nuKWZB2V+Kr3BnOMaDP tksmaG/breYiUszUh7Ww/CnSgUkxH/UW+LQGVTqqMEt3nUpQioFCf7oLdSJOjnIP zJqG6UbcgaCvj5XBEw3a3r1OiMwsm2w2F7EcfVh8afPvujWmsQopSdjo9aeZUbVW OFgOVEIAnChIJW6bnAcdyLMN3e9DQgxBkNVOz3nmR8xXH/pPyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRqe/NmlWfUgl5zWi3ENXi7Z6mWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjBmYjdhNmQtNWQ4Ni0z NTA5LThiMGQtZTFlZjBhOWI5MjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISyWcWlwx/WocYQ8WqYysUNX8t8s1wjALQjLF9jhtYhxeQsArH2mHNQ X1gpsjQP8CbCz1S1+LVxyDyBb2hJ/nnCIq3VS7KiP7l72cxxxJfuMb/YPZxJa4ZR o4UqtfttJOJ/tLmDArz7It46DRqjhiNOlYR0VeR+UW47gdXuv4GsyemFgtB7FxHj KZjOjVfVUv7wV/KbFZRz0QcTv4wT7+CnWnIinJH5zIucI0PCcB5tEw3mu9xTTcKn NlwzFkxP2L7qW0BbxCXFownAiRmqPzhSHd2fqEL8oUkAKz1jQJNimfEQxXiU4qHN luRxzuC0Bjx6xsBhy69sqD/J00b7BKU= -----END CERTIFICATE-----Generated at Tue Sep 22 02:24:54 2026 by rpki-client